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ABSTRACT 



A system for time-stamping a digital document, for 
example any alphanumeric, video, audio, or pictorial 
data, protects the secrecy of the document text and 
provides a tamper-proof time seal establishing an au- 
thor's claim to the temporal existence of the document 
Initially, the document may be condensed to a single 
number by means of a one-way hash function, thereby 
fixing a unique representation of the document text The 
document representation is transmitted to an outside 
agency where the current time is added to form a re- 
ceipt. The agency then certifies the receipt by adding 
and hashing the receipt data with the current record 
catenate certificate which itself is a number obtained as 
a result of the sequential hashing of each prior receipt 
with the extant catenate certificate. The certified re- 
ceipt bearing the time data and the catenate certificate 
number is then returned to the author as evidence of the 
document's existence. In later proof of such existence, 
the certificate is authenticated by repeating the certifi- 
cation steps with the representation of the alleged docu- 
ment, the alleged time data, and the catenate certificate 
number appearing in the agency's records immediately 
prior to the certificate number in question. Only if the 
alleged document is identical to the original document 
will the original and repeat certificate numbers .match. 

13 Claims, 2 Drawing Sheets 
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substantially unlimited number of system subscribers 

DIGITAL DOCUMENT TI ME-ST AMPING WITH who are unknown to one another, but for a public direc- 
CATENATE CERTIFICATE tory, verifiable communications remain bilateral. These 

limitations persist, since although a public key. "signa- 
. BACKGROUND OF THE INVENTION 5 ture'\ such as that which entails public key decryption 
In many situations there is a need to establish the date ° f * message encrypted with the private key of the 
on which a document was created and to prove that the transmitter, provides any member of the unlimi ted uni- 
text of a document in question is in fact the same as that Y«*e with significant evidence of the identity of the 
of the original dated document. For example, in intel- transmitter of the message, only a given message recipi- 
lectual property matters it is often crucial to verify the 10 ent can be satisfied that the message existed at least as 
date on which a person first put into writing the sub- early as the time of its receipt Such receipt does not, 
stance of an invention. A common procedure for thus however, provide the whole universe with direct evi- 
"time-stamping" an inventive concept comprises daily dence of time of the message's existence Testimony of a 
notations of one's work in a laboratory notebook. Indel- such a recipient in conjunction with the received mes- 
ibly dated and signed entries are made one after another 15 sage could advance the proof of message content and 
on each page of the notebook where the sequentially time of its existence, but such evidence falls victim to 
numbered, sewn-in pages make it difficult to revise the the basic problem of ready manipulation of electronic 
record without leaving telltale signs. The validity of the digital document content, whether by originator or 
record is further enhanced by the regular review and witness 

signed witnessing by a generally disinterested third 20 Thus, the prospect of a world in which all documents 
party. Should the time of the concept become a matter are m easily modifiable digital form threatens the very 
for later proof, both the physical substance of the note- substance of existing procedures for establishing the 
book and the established recording procedure serve as credibility of such documents As a means of providing 
effective evidence in substantiating the fact that the ^ answer to this burgeoning problem, we disclosed in 
concept existed at least as early as the notebook witness 25. QUr copying tj.S. Pat. application Scr. No. 

date- . , J , , . „ 07/561,888, file Aug, 2, 1990, a system of verification by 

The increasingly widespread I use of electronic docu- which a documcnt may be so fixed in time and 
ments, which include.not only digital representations of ^ it ^ ntf at lcast to thc cxtcnt cur . 

readable text but also of video, audio, jmd picton^ data, ^ recognized in tangible documents, direct evi- 
now poses a senous threat to the viability of the "note- 30 ^ Qn ^£~ ues . 

bcok-co^tofesteblishmg the^ ^ metnod describ ed there entails transmittal of a 

ument. Because electronic digital documents are so ^ ^ whefc cufrent Umc data 

easily revised, and since such revisions may be made • ^^^^ . t , * u / ct Mrttnn n€ „ HJ ^ tol 

without telltale sign, there is available limited credible m incorporated with at least a portion of a digital 
Sce^aTa iv« document truly states the date on 35 representation of the document. In order to prevent 
which it was crated or the message it originally car. coUusive rn^^g by the agency, one or more agen- 
ried. For the same reasons there even arte serious « ™*™ or * t0 

doubt as to the authenticity of a verifying signature. "corporate into Ae tin* : stamp ► receipt at least the time 
Without an effective procedure for ensuring against the a P^ 10 * of ^enUfying data from one or more 

surreptitious revision of digital documents, a basic lack 40 temporally adjacent receipts Although ttos procedure 
of system credibility prevents the efficiencies of dec- accomplishes the two-fold goals of effective time- 
tronic documentation from being more widely imple- stamping, i.e., to fix the time and content of a document 
mented and to prevent collusive misdeeds of author and agent- 

Some procedures are presently available for verifying witness, any subsequent personal interaction between 
electronic document traiismissions; however, such pro- 45 participating authors may be burdensome, particularly 
cedures are limited in application to bilateral communi- m la ter proof stages where the comparison of contem- 
cations. That is, in such communications the sender porary receipts is required, 
essentially desires to verify to the receiver the source SUMMARY OF THE INVENTION 

and original content of the transmitted document. For 

example, "private key" cryptographic schemes have 50 The present invention represents an improvement on 
long been employed for message transmission between our above-mentioned system and provides a reliable and 
or among a limited universe of individuals who are more adaptable method of time-stamping digital docu- 
known to one another and who alone know the de- ments that continues to maintain the two essential char- 
crypting key. Encryption of the message ensures against acteristics of accepted document verification. First, the 
tampering, and the fact that application of the private .55 content of a document and a time stamp of its existence 
key reveals the "plaintext" of the transmitted message are "indelibly" incorporated into the digital data of the 
serves as proof that the message was transmitted by one document so that it is not possible to change any bit of 
of the defined universe. The time of creation of the the resulting time-stamped data without such a change 
message is only collaterally established, however, as being apparent In this manner, the state of the docu- 
being not later than its receipt by the addressee. This 60 ment content is fixed at the instant of time-stamping, 
practice thus fails to provide time-stamp evidence that Second, the time at which the digital document is 
would be useful in an unlimited universe at a later date. stamped is certified by a cryptographic summary, or 
A more broadly applicable verifying communication catenation, procedure that deters the incorporation of a 
procedure, that of "public key" cryptography, has been false time statement In essence, the method transfers 
described by Diffie and Hellman ("New Directions in 65 control of the time-stamping step from the author to an 
Cryptography", IEEE Transactions On Information independent agent and removes from the author the 
Theory, Vol IT-22, November 1976, pp. 644-654). . ability to influence the agent in the application of other 
While this scheme expands the utilizing universe to a than a truthful time stamp. 
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One embodiment of the present invention presumes a value as is contained in the author's certificate, assum- 
number of document authors distributed throughout a ing use of the original hashing algorithm, 
communication network. Such authors may be individ- Any available deterministic function, e.g. a one-way 
uals, companies, company departments, etc., each rep- hash function such as that described by Rivest ("The 
resenting a distinct and identifiable, eg., by ID number 5 MD4 Message Digest Algorithm", Advances in Cryp- 
or the like, member of the author universe. This uni- tology— Crypto '90, Springer- Verlag, LNCS, to appear), 
verse would be supported by a central record reposi- incorporated herein by reference, may be used in the 
tory and would, in essence, constitute the clientele of present procedure. In the practice of the invention, such 
tuch an outside time-stamping agency CTSA). a hashing operation is optionally employed by the au- 

ln this particular application, as depicted in FIG. 1 of "> thor to obtain the noted benefit of transmission security, 
the drawing, the method entails an author's preparation although it might be effected by the TSA if the docu- 
of a digital document, which may broadly comprise any mcnt wcrc received in plaintext form. In whatever such 
alphanumeric, audio, or pictorial presentation, and the n*™"* document content and incorporated time 
transmission of the document, preferably in a condensed data are fixed against revision, mere remains the further 
representative form, to the TSA. The TSA time-stamps 15 st fP> m r ordcr 10 Promote the credibility .of the system, 
the document to create a receipt by adding digital data of c«rtifymg to the members of an as yet unidentified 
signifying the current time, concatenates the receipt T m J™?"? ^ 

wto ^current cryptographic catenation of its prior "A. rather than by the aufcor, and tint the tune mdi- 

Z , : . - f-rtm cauon is correct, i.e., that U has not, for instance, been 

time stamp receipts, and creates a new catenation from ^ . , . _^ ; , ' ~ A . „ . 4 , 
the composite document by means of a deterministic 20 fraudulentiy stated by the TSA in collusion with the 

function, such as fussed in <^^™* ^satisfy these concerns, the TSA maintains a re- 

resulting catenate value is *"<^ cord of its sequential time-stamping transactions by 

ofcer identifying data in a document, now a certificate ^ ^ ^ <o {}$ <j *^ t ^ 

of the temporal existence of the original document^ ^ fe detenmnistic function, e.g. hashing, the 

which is transmitted back to the author where it will be £^J te to obtain a ncw catenation. This catenation, 
held for later use in any required proof of such exis- ^ ft yalue resulting from ^ hashing process, is in- 

tcncc * . . . . . , , eluded on the receipt or certificate returned to the au- 
To ensure against interception of confidential docu- ^ ^ to the ^^ted time stamp, 
ment ^formation during transmission to the TSA, and 3Q confirmation of the certificate at a later time involves 
to reduce the digital bandwidth required for traiismis- th c combination of the author's time receipt 
sion of an entire document, the author may optionally m ^ ^ next p rcv ious catenate value in the TSA re- 
convert the digital document string to a unique value jj^ resulting generation of thc author's catenate 
having vastly condensed digital size by means of a de- certificate value proves to the author and to the uni- 
terministic function which may, for example, be any one 35 verse at i^ge th at tnc certificate originated with the 
of a number of algorithms known in the art as "one-way This result also proves the veracity of the time- 
hash functions". Such an application of hash functions stamp itself, since all original elements of the original 
has been described, among others, by Damgard in his receipt must be repeated in order to again generate, by 
discussions on the improvement of security in document ^ hashing function, the original catenate certificate 
signing techniques ("Collision-Free Hash Functions 4Q value. 

and Public Key Signature Schemes", Advances in Cryp- ^ procC ss of the invention relies upon the relatively 
tology— Eurocrypt '87, Springer-Verlag, LNCS, 1988, continuous flow of documents from the universe of 
Vol. 304, pp. 203-217). In practice of the present inven- authors through the facilities of the TSA. For each 
tion, however, the "one-way" characteristic typical of a gj ven processed document Djt, from an author, Ajt, the 
hashing algorithm serves an additional purpose; that is, 45 jsa generates a time-stamp receipt which includes, for 
to provide assurance that the document cannot be se- example, a sequential receipt transaction number, u, the 
cretly revised subsequent to thc time the TSA applies its identity of the author, for example by ID number ID*, 
time stamp and incorporates the document into the 0 r the like, a digital representation, e.g. the hash, H*, of 
catenate certificate. the document, and the current time, U. The TSA then 
A hashing function provides just such assurance, so includes these receipt data, or any representative part 
since at the time a document, such as an author's origi- thereof, with the catenate certificate value, Cjt-i, of the 
nal work or a composite receipt catenation, is hashed immediately preceding processed document D*.i. of 
there is created a representative "fingerprint" of its author, A*-i, thereby bounding the time-stamp of docu - 
original content from which it is virtually impossible to ment D*, by the independently established earlier re- 
recover that document Therefore, the time-stamped 55 ceipt time, U-l- 

document is not susceptible to revision by any adver- The composite data string, rjt, ID*, H*> U, C*-i), is 
sary of the author. Nor is the author able to apply an then hashed to a new catenate value, C*, that is entered 
issued time-stamp certificate to a revised form of the with transaction number, r*. in the records of the TSA, 
document, since any change in the original document and is also transmitted to Ajt, as the catenate certificate 
content, even to the extent of a single word or a single 60 value, with the time-stamp receipt data. In like manner, 
bit of digital data, results in a different document that a certificate value derived from the hashing of C* with 
would hash to a completely different fingerprint value. time stamp elements of the receipt for document D* + 1, 
Although a document cannot be recovered from its would be transmitted to author, A** 1. Thus, each of 
representative hash value, a purported original docu- the time-stamped catenate certificates issued by the 
ment can nonetheless be proven in the present time- 65 TSA is fixed in the continuum of time and none can be 
stamping procedure by the fact that a receipt concate* falsely prepared by the TSA, since any attempt to re- 
nation comprising a true copy of the original document generate a catenate certificate number from a hash with 
representation wfll always hash to the same catenate the next prior certificate would reveal the discrepancy. 
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In a more general application of the invention, as the following excerpt is amply representative of a docu- 

shown in FIG. 2, the representation, eg., a hash, of a ment, D*. for which time-stamping is desired: 

particular document is simply concatenated with the . . . the idea in which affirmation of the world and 

catenate certificate value of the next previous document ethics are contained side by side ... the ethical accep- 

and the deterministic function representation, again a 5 tancc of the world and of life, together with the ideals 

hash, for example, of this composite is then generated of civilization contained in this concept . . . truth has 

and retained as the record catenate value for the panic- no special time of its own. Its hour is now— always, 

ular document Each subsequent document in the grow- Schweitzer 

ing series is similarly processed to expand the record the author so desires, the document, Da, may, for 
which itself would serve as a reliable certification of the W the purposes of security as well as to reduce the re- 
position each such document occupies in the series, or transmission bandwidth, be condensed by means, 
more broadly viewed, in the continuum of time. This for example, of the mdi algorithm. As maicated by the 
embodiment of the invention provides a reliable method ' optum* J^ed step 12, the document is thus hashed to 
by which an organization, for instance, could readily • value, H*. of a standard 12* bit format which, ex- 
certify the sequence and continuity of its digital business 15 P™*** m **** 16 ' aP?** 5 aS: 

documents and records: ee2d3e*60dnocb62io4fb3fWcMc7 

Additional variations in the process of the invention 
might include the accumulation of documents, prefers- ]t should ^ QOted at this point that the hexadecimal and 
bly in hashed or other representative form, generated ^ other numcri cal value representations used in this exam- 
within an author organization over a penod of time, e.g. plc MC not m such form to ^ implementation of 
a day or more depending upon the extent of activity, thc mvcntion . That is to say, any portion or other dis- 
with the collection being hashed to present a single ^ representation of those values selected according 
convenient document for time-stamping and certifica- to a gj ven procedure would function as well 
tiori. As an alternative, ah organizational designee might J5 Author, A*, whose assigned identification number, 
serve as a resident "outside" agency who would main- jj}^ is 634 in a 1000 member author universe, then 
tain a catenate certificate record of organization docu- transmits the document, at step 13, to the system TSA in 
ments by means of the present procedure and on a rcgu- the identifying message, (ID*, Ha), which appears: 
lar basis would transmit the then current catenate certif- 
icate to a TSA. In this manner the sequence of an orga- M 634, cc2cOca60dflOcb62 J c4fb3fBdc34c7 
nization's business records would .be established both 

within the organization and externally through the as a request that the document be time-stamped. 
TSA. The TSA, at step 14, prepares the receipt for docu- 

Also, the implementation of process embodiments . ment, Djt, by adding a sequential receipt transaction 
might readily be automated in simple computer pro- 35 number, r*, of 1328, for example, and a statement of the 
grams which would directly carry out the various steps current time, t*. This time statement might be a standard 
of hashing, transmitting, and concatenating original binary representation of computer clock time or simply 
document representations, applying current time a literal statement, e.g., 19:46:28 Greenwich Mean Time 
stamps, generating and recording catenate certificate on Mar. 6, 1991, in order to allow the final time-stamp 
values, and providing receipt certificates. 40 certificate to be easily read. The receipt then comprises 

the string, (r$, U, ID*, H*), which appears as follows; 

THE DRAWING 

The present invention will be described with refer- ee2eDet6CteflOcb62lc4fb3f8dc34c7 
ence to the accompanying drawing of which: 

FIG. 1 is a. now diagram of an embodiment of the 45 In ^^anai ^ ^ invention, the records of the 
time-stamping process according to the invention; and TSA at this time contain a catenation of all its prior 

FIG. 2 is a flow diagram of the general catenation rBCcipt transactions in the form, for example, of the 
process according to the invention. valucs rcsu iting from the hashing of each consecutive 

DESCRIPTION OF THE INVENTION _ receipt with ***** catenation to that time. This 

50 catenate record would thus have been developed as 
The following exemplary application of the present f oUowg . The receipt of first transaction (r*_0 was 
invention, as depicted in the steps of the drawing, will hashed with an initial datum value, e.g., the hash of the 
serve to further describe the time-stamping process. For identification of the TSA, to yield the first catenate 
convenience in the presentation of this example, the value, Ci, which was then used as the certificate value 
deterministic function employed is the md4 hashing 35 f or thai transaction. In the next transaction, the 
algorithm described by Rivest, as mentioned above; receipt was concatenated with Qand the composite 
however, the function actually selected by a TSA could hashed to yield the second catenate certificate value, 
be any of various available algorithms. Whatever algc- m & ^ on through the entire history of the TSA 

rithm is implemented, records of its identity and period time-stamping operation. 

of use must be maintained for later proof of certified 60 Assume now that the document, D*.i, immediately 
receipts. preceding that of the present , example had been pro- 

The present time-stamping procedure begins, as at cessed by the TSA, in its 1327th receipt transaction, to 
step 11 of the drawing, with the preparation of a digital w the catenate certificate value, Cjt-i: 

document by the author, e.g. A*. As previously noted, 

this digital document may be the digital form or repre- 65 26fMe«925i$«bif0d6O47c2de6eOfcr 
sentation of any alphanumeric text or video, audio, 

pictorial or other form of fixed data. Although the pres- In step 13 of the process, the TSA now concatenates 
ent process may be used with documents of any length, with this value the receipt for D* to obtain: 
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26TMeart251»lfCd6047c2de6eOfcf. 1328. 
194628GMT06MAR91, 634, 
ee2ef3ea60dfl0cb62 Ic4fb3f8dc34c7 

This composite is then hashed by the TSA, at step 16, to 
yield as the new catenate certificate value, C*: 

46f7d75fDfbc*93e96fc3S*72u2Sctl 

The TSA then adds this value to its records and pre- 
pares and transmits to author, A*, at step 17, a time- 
stamp certificate, including this catenate certificate 
value, which might appear as: 



10 



Traduction Number 
Client ID Number. 
Time: . 
Date: 

Certificate Number: 



1328 
634 

19:46:21 Greenwich Mean Time 
06 March 1991 

46nd75f«bea93e96fc3ft472aa2ScaI 



15 



The procedure would be repeated by the TSA for 
each subsequent time stamp request Assuming the next 
request from A*+i was received with the document in 
the form of its hash H*+ u as: 



201, 882653eeO4d511dbb5eO6S83aa273Q0b 



25 



at 19:57:52 GMT on Mar. 
catenation would appear: 



6, 1991, the composite con- 



46f7d75fDfbea95c96fc38472aa28cal, 1329, 
195752GMT06MAR1991, 201, 
882653ee04d51 ldbbSeO6883aa273Q0b 

and the certificate returned to A*+i would read: 



Transaction Number: 
Ctieni ID Number 
Time: 
Date: 

Certificate Number: 



1329 
201 

1937:52 Greenwich Mean Time 
06 March 1991 

d9bblblld5Bbb09c2763e7915fbb83ad 



When, at 8 later date, author, Aa+i, desires to prove 
the authenticity of document, Djt+i, as that which was 
received and dated by the TSA on Mar. 6, 1991 at 
19:57:52, the records of the TSA are examined to obtain 45 
the catenate certificate value, Cjt, of the next previous 
transaction, 1328, which appears as: 



46nd73(Ofbea95e96fc38472aa28cal 



The alleged document is then reduced to the form in 
which it was transmitted to the TSA, eg, as its hash, 
and this value is then concatenated with C* and the 
remaining data from the certificate of A* + 1. The result* 
ing composite, assuming the alleged document to be 55 
authentic, now appears as: 



46nd75i0fbea95e96fc38472aa28cal, 1329, 
195752GMT06MAR199I, 201, 
882653ee04d51 Idbb5e06883aa27300b 

which, when hashed, produces the correct catenate 
certificate value: 

d9bblblld58bb09c2763e7915fbb83ad 

thereby proving the alleged document to be Djt+i. 
Otherwise, a revised document would hash to a differ- 
ent value and the composite of which it is an element 



would hash to a catenate certificate value different from 
that stated in the certificate of transaction number 1329. 

If further proof were demanded, for example upon an 
adversary allegation that C*+ 1 had been falsified after 
the fact of a document revision, the certificate and the . 
submitted, e.g. hashed, document of A*, who is identi- 
fied from TSA records, would be employed in an at- 
tempt to regenerate the subsequent, questioned certifi- 
cate value, Cjfc+i. If that value were correct, Djt+i 
would be proved. As an alternative, the certificate 
value, C*+ 1, could be proved by the regeneration of the 
subsequent catenate certificate value, Cjt+2, from the 
certificate data and submitted document of A*+2» since 
no feasible revision could be made to that later docu- 
ment which would result in a match of Ck+z if C*+i 
were not the same as existed at the time of the transac- 
tion, 1330, processing D*+2. 

In the more general record catenation procedure 
depicted in FIG. 2, the documents in a growing series 
20 are processed, within an organization or by a TSA, as 
each is generated. At step 21, a new document represen- 
tation, such as would be generated by a hashing deter- 
ministic function algorithm, becomes available and, at 
step 22, is concatenated with the current record cate- 
nate value that was generated in the processing of the 
previous document This composite is then processed, 
e.g., hashed, at step 23, to generate the new catenate 
value for the present document. This value may be 
30 separately recorded and utilized for inclusion in a certif- 
icate, or simply retained in the processing system for 
application to the next document which is presented at 
step 24. The subsequent processing steps 25, 26 arc 
applied to this document representation, and the pro- 
cess repeats with each new document in its turn. 

The procedures described and variants suggested 
herein for the practice of this time-stamping process and 
the various other embodiments which will become ap- 
parent to the skilled artisan in the light of the foregoing 
40 description are all nonetheless to be included within the 
scope of the present invention as defined by the ap- 
pended claims. 
What is claimed is: 

1. A method of certifying the temporal sequence of 
digital documents in a series of such documents charac- 
terized in that said method comprises: 

a) generating a digital representation of a specified 
one of the documents in said series; and 

b) generating a catenate certificate value represen- 
tation for said specified document by applying a 
selected deterministic function algorithm to a 
catenation comprising said digital representation 
and the catenate certificate value representation 
for the document immediately prior in said series 
to said specified document. 

2. A method according to claim 1 
characterized in that the method further comprises 

repeating the recited steps with each subsequent 
document in said series. 

3. A method according to claim 2 
characterized in that said method further comprises 

maintaining a sequential record of said series docu- 
ments with their respective catenate certificate 
value representations. 

4. A method according to claim 2 
characterized in that each said digital representation 

is generated by applying to said document one or 
another deterministic function algorithm which 



35 



50 



60 



65 
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may be the same as or different from said selected characterized in that said prior certificate value rep- 
deterministic function algorithm. resentation comprises at least a portion of the cate- 

5. A method according to claim 4 nate certificate value of the immediately preceding 
characterized in that said one or another determinis- recording time-stamping transaction. 

tic function algorithm is any one-way hashing algo 5 10. A method of time-stamping a digital document 

rithm. according to claim 7 

6. A method according to claim 2 characterized in that said selected deterministic rune- 
characterized in that said selected deterministic func- tion algorithm is any one-way hashing algorithm. 

tion algorithm is any one-way hashing algorithm. 11. A method of time-stamping a digital document 

7. A method of tune-stamping a digital document 10 according to claim 7 

which comprises transmitting a digital representation of . characterized in that said transmitted digital docu- 

said document to an outside agency, creating at said ment representation comprises at least a portion of 

outside agency a receipt comprising a digital represen- the digital representation of the value derived by 

tation of then current time and at least a portion of a applying to said digital document one or another 

digital representation of said digital document, and cer- 15 deteiministic function algorithm which may be the 

drying said receipt at said outside agency same as or different from said selected determinis- 

characterized in that the certifying of said receipt tic function algorithm, 

comprises: 12. A method of time-stamping a digital document 

a) concatenating a digital representation of said according to claim 7 

receipt with a representation of a prior catenate 20 characterized in that said receipted digital document 

certificate value to form a composite; and representation comprises at least a portion of the 

b) generating a catenate certificate value for said digital, representation of the value derived by ap- 
receipt by applying a selected deterministic func- plying to said digital document one or another 
tion algorithm to said composite. deterministic function algorithm which may be the 

8. A method of time-stamping a digital document 25 same as or different from said selected determinis- 
according to claim 7 tic function algorithm. 

characterized in that said outside agency maintains a 13. A method of time-stamping a digital document 
record comprising the catenate certificate values of according to claim 12 

prior time-stamping transactions. characterized in that said one or another determinis- 

9. A method of time-stamping a digital document 30 tic function is any one-way hashing algorithm, 
according to claim 7 * * * * * 
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